Date: Fri, 13 Jan 2012 20:52:48 +0100 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: David O'Brien <obrien@freebsd.org> Cc: freebsd-rc@freebsd.org Subject: Re: Problem with LOGIN and cron Message-ID: <20120113195245.GE1694@garage.freebsd.pl> In-Reply-To: <20120113192810.GA87287@dragon.NUXI.org> References: <20120112234424.GA41056@dragon.NUXI.org> <CADLo838ygJPVCdkai-Ui6eRKt4cZ3tX9Xj67KxmRKc10tLcDag@mail.gmail.com> <20120113192810.GA87287@dragon.NUXI.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--ZRyEpB+iJ+qUx0kp Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jan 13, 2012 at 11:28:10AM -0800, David O'Brien wrote: > On Fri, Jan 13, 2012 at 07:11:01AM +0000, Chris Rees wrote: > > On 12 January 2012 23:44, David O'Brien <obrien@freebsd.org> wrote: > > > 'LOGIN' states: > > > =A0 =A0 =A0 =A0This is a dummy dependency to ensure user services suc= h as xdm, > > > =A0 =A0 =A0 =A0inetd, cron and kerberos are started after everything = else, in > > > =A0 =A0 =A0 =A0case the administrator has increased the system securi= ty level > > > =A0 =A0 =A0 =A0and wants to delay user logins until the system is (al= most) fully > > > =A0 =A0 =A0 =A0operational. > > > > > > So based on that, 'securelevel' should have: > > > +# REQUIRE: sysctl > > > +# BEFORE: =A0LOGIN > > > Otherwise a cronjob could act against securelevel=3D1+ for a short pe= roid > > > of time. > >=20 > > Hm, but what if I have an @reboot line in crontab, that relies on > > securelevel <1? >=20 > Can you give an example? >=20 > $ man cron | grep @reboot > {empty} > $ man crontab | grep @reboot > {empty} $ man 5 crontab | grep @reboot @reboot Run once, at startup. --=20 Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://yomoli.com --ZRyEpB+iJ+qUx0kp Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (FreeBSD) iEYEARECAAYFAk8Qi40ACgkQForvXbEpPzROgQCfX7E9VS2mXdTMZ4pMpqbsvdGc pG4AoN6PsF2Gb/zJBhlVouyQTCNrozd0 =xzL4 -----END PGP SIGNATURE----- --ZRyEpB+iJ+qUx0kp--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120113195245.GE1694>